Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: Ur9DCjCQQDS2Ai4jMDZxyRlA2O16YPvp4qJ/WFg7X0w=
Subject key identifier: BA:22:8B:F4:15:45:9F:03:58:D7:C5:C5:DF:CC:93:A1:62:C5:8F:A4
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 019D9962D2F4FBF9CC4F69821EB50709E65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 13EF
Signing time: Fri 17 Apr 2026 03:01:23 +0000
Manifest this update: Fri 17 Apr 2026 03:01:23 +0000
Manifest next update: Sat 18 Apr 2026 03:01:23 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: ABVt0Wor6PkvQngogOSM8C9JMt0e5QrH5SJWLgv2zK0=)
2: FMKR3CaUlRK9liJAv-tSvgFdbCg.roa (hash: khLsIGfKCgMHIIEDU5+wjoIrC4R3I6oBgk6LSwjYqtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d2:f4:fb:f9:cc:4f:69:82:1e:b5:07:09:e6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Apr 17 03:01:23 2026 GMT
Not After : Apr 18 03:01:23 2026 GMT
Subject: CN=ba228bf415459f0358d7c5c5dfcc93a162c58fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:b1:85:e8:bb:90:e7:86:70:0e:ed:eb:18:
af:6f:fb:84:2d:9d:60:44:f5:80:ce:b8:dd:87:9d:
83:3c:2a:2a:e7:a9:c8:00:53:ca:bf:7a:8f:48:e6:
e2:8f:61:71:cb:5d:7d:a1:4a:96:53:c6:99:da:7a:
41:5f:c8:5d:66:c3:a5:13:dc:c4:e3:cf:01:b4:c9:
a9:6d:15:55:f6:5a:70:30:a8:08:a5:7c:28:c6:c3:
16:f7:2d:32:99:2a:a9:26:1b:59:2a:74:0d:b0:d7:
67:26:b9:86:6a:e7:8a:3e:1d:6f:02:b5:c1:d5:e4:
69:24:18:be:be:73:e7:25:00:6e:e5:02:66:3b:b1:
c1:e8:b2:53:d2:85:c1:cc:94:a7:54:ce:c2:ef:dc:
e8:67:e2:ed:a9:95:02:19:10:93:aa:19:0e:85:80:
86:6a:82:b0:a2:af:0f:46:a6:89:3d:34:24:ce:bd:
4b:1c:b6:11:24:c7:8f:c8:62:ee:f7:94:16:1d:69:
00:9c:dd:a3:83:13:36:a1:d4:98:7f:59:a8:d0:54:
38:43:d3:50:a1:9b:7c:1c:db:45:d4:31:ba:f9:1c:
1b:56:e6:c3:45:eb:b0:2e:5b:43:01:a9:95:e3:f4:
ae:1d:55:a5:f7:77:0a:24:c6:31:da:20:73:53:ee:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:8B:F4:15:45:9F:03:58:D7:C5:C5:DF:CC:93:A1:62:C5:8F:A4
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:09:8b:0d:d6:c3:cc:04:24:59:90:61:67:25:e4:2f:bf:d0:
41:e2:73:9f:08:90:d8:5a:e2:12:b3:f5:0d:b6:b3:ee:67:78:
0b:8b:1d:5a:ee:02:65:53:41:7c:2b:4d:d1:83:47:f6:51:1d:
70:5e:59:b4:03:f7:0f:91:77:e0:53:b7:9a:a1:9a:91:d7:2c:
35:43:fe:94:81:78:71:6f:d0:39:98:99:4c:d0:6c:0e:a0:10:
5a:b6:3d:50:70:83:b3:dc:98:63:c6:d1:8e:d0:06:b2:87:dd:
56:90:00:22:ec:99:aa:c1:f7:42:b8:13:8b:fb:60:2b:28:3b:
88:9b:24:80:18:9b:7f:7d:81:d1:d0:a9:4d:01:d0:37:d6:35:
b9:78:46:5e:a3:ef:7c:6b:a2:8a:39:9f:57:39:6e:d7:ba:e0:
52:2a:76:36:78:a7:d5:13:c4:03:46:dd:2a:2f:d8:ca:18:58:
a0:8b:a9:b9:3a:50:99:61:7d:63:7b:57:6b:63:43:17:45:a5:
3f:63:b7:f1:44:be:0b:65:68:10:09:60:23:37:e2:50:98:91:
0e:88:10:4d:ce:9f:c9:70:75:3a:a1:65:52:4c:4c:94:b0:ab:
50:90:7b:b8:f2:98:68:12:c3:e9:df:a5:86:78:06:83:49:35:
36:9a:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:58 2026 by rpki-client